Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/a32c29-4087-4f87-89d9-9e4d1376ba31/1/sTFfExaKIog9oEuECAZgc7Hz8Nw.mft
File: sTFfExaKIog9oEuECAZgc7Hz8Nw.mft (raw, json)
Hash identifier: o4Q0q0jdPBt1586ZK9fRXuHvTuxs6CT14u0efm5MZMo=
Subject key identifier: E7:50:0B:63:33:8B:59:19:18:0A:AA:CB:4E:F6:75:C7:FA:F9:B5:9C
Authority key identifier: B1:31:5F:13:16:8A:22:88:3D:A0:4B:84:08:06:60:73:B1:F3:F0:DC
Certificate issuer: /CN=b1315f13168a22883da04b8408066073b1f3f0dc
Certificate serial: 019D27046D9C9FA4BC83AE01F7CB60A1060B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTFfExaKIog9oEuECAZgc7Hz8Nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/a32c29-4087-4f87-89d9-9e4d1376ba31/1/sTFfExaKIog9oEuECAZgc7Hz8Nw.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 22:01:34 +0000
Manifest this update: Wed 25 Mar 2026 22:01:34 +0000
Manifest next update: Thu 26 Mar 2026 22:01:34 +0000
Files and hashes: 1: sTFfExaKIog9oEuECAZgc7Hz8Nw.crl (hash: c4ssITwUyvjc+bLcT0jPZBaboIVRG6TyI3ouZC/l8cI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/a32c29-4087-4f87-89d9-9e4d1376ba31/1/sTFfExaKIog9oEuECAZgc7Hz8Nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/a32c29-4087-4f87-89d9-9e4d1376ba31/1/sTFfExaKIog9oEuECAZgc7Hz8Nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTFfExaKIog9oEuECAZgc7Hz8Nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:6d:9c:9f:a4:bc:83:ae:01:f7:cb:60:a1:06:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1315f13168a22883da04b8408066073b1f3f0dc
Validity
Not Before: Mar 25 22:01:34 2026 GMT
Not After : Mar 26 22:01:34 2026 GMT
Subject: CN=e7500b63338b5919180aaacb4ef675c7faf9b59c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f8:89:c0:21:87:99:1f:74:e5:84:a5:fa:a8:
31:5b:e3:b6:28:40:3f:91:41:f4:c2:3a:d5:d7:3f:
3c:b8:50:0e:b3:10:2b:cd:d2:be:84:c2:1a:dc:a7:
48:5a:c1:a7:8a:99:21:96:c0:c1:2b:e1:f1:e5:bb:
7d:38:94:43:17:95:98:c6:13:96:ec:7c:45:f3:04:
d7:b1:d6:59:85:87:6f:75:0a:22:30:ef:a7:eb:fb:
20:66:35:62:8d:67:a1:4d:a1:75:28:a5:c1:25:eb:
17:2b:7a:45:9e:74:87:59:a3:a6:53:25:e0:1a:f1:
f9:c1:0f:9f:69:ae:b4:d5:27:df:5d:65:2e:52:2e:
51:ab:ad:b9:80:83:39:c8:a9:2e:9e:5f:2f:d7:e4:
91:b1:e6:f0:96:90:eb:69:c1:40:98:55:95:d3:ad:
a4:b7:cc:e2:68:49:ef:04:f3:f3:36:89:b6:8e:97:
c2:a4:b7:53:fd:63:47:52:59:c8:05:b5:39:ca:9e:
b9:d3:1f:f6:7b:b4:b3:ac:fb:80:ce:2b:5d:4a:a5:
11:3f:e1:36:13:09:12:83:15:64:19:6e:f3:e8:03:
47:13:85:4d:99:e4:22:03:8a:f0:58:e1:0e:1a:46:
0b:e3:34:b8:e6:9d:4f:6d:b3:42:0a:41:2e:ac:13:
7e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:50:0B:63:33:8B:59:19:18:0A:AA:CB:4E:F6:75:C7:FA:F9:B5:9C
X509v3 Authority Key Identifier:
keyid:B1:31:5F:13:16:8A:22:88:3D:A0:4B:84:08:06:60:73:B1:F3:F0:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTFfExaKIog9oEuECAZgc7Hz8Nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a32c29-4087-4f87-89d9-9e4d1376ba31/1/sTFfExaKIog9oEuECAZgc7Hz8Nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a32c29-4087-4f87-89d9-9e4d1376ba31/1/sTFfExaKIog9oEuECAZgc7Hz8Nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:a4:3a:26:4e:5d:a7:8b:52:99:11:42:ce:6d:73:a5:4e:0a:
4b:f8:de:a7:ca:69:c7:93:bd:ec:47:ce:a0:14:ff:7c:99:b4:
3e:17:a4:16:6d:bd:6b:38:6f:57:53:6c:37:14:7e:5d:87:da:
c4:ee:e4:07:f8:33:ae:00:b3:fb:fa:78:b5:17:b5:c3:f6:83:
e2:c6:b5:38:3d:f2:7d:3a:b6:ef:b4:4c:67:b5:3f:c0:aa:aa:
48:05:8a:5b:d2:30:fc:12:bb:01:be:93:01:2d:90:d4:db:1b:
33:b4:40:6d:fa:5d:76:6c:23:ea:65:45:56:e9:26:10:20:c1:
de:7f:f7:e6:79:0d:87:0e:2e:d5:17:fc:af:2a:92:47:43:d1:
70:9f:6b:4f:f7:b6:d2:8b:7a:ff:36:90:42:48:31:c0:ae:0e:
97:0f:fa:85:05:48:c1:23:62:91:0e:5d:e6:83:1b:e2:31:33:
42:4c:89:4d:75:19:08:63:17:b1:26:81:c3:7f:9c:55:52:57:
c9:ed:d9:39:24:cc:43:7d:4b:31:92:ae:20:31:71:ea:26:06:
8e:e0:d6:d2:83:27:82:e6:4e:00:03:d7:c5:1e:2e:ee:0b:02:
9c:ee:ec:9f:01:13:b4:12:bc:b7:a2:ec:c8:ed:84:2c:fb:b2:
92:88:55:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:32:26 2026 by rpki-client